1. Purpose

Enjoy Math (the “Academy”) operates the Enjoy Math student portal web application (the “Service” or “API Client”). This Privacy Policy explains what personal information and YouTube API Data we access, collect, store, use, process, share, and delete. We comply with applicable privacy law and the YouTube API Services Terms of Service and Developer Policies.

Users must agree to this Privacy Policy before using the API Client’s features, including video upload and playback. This Policy is always available from the login screen, in-product menus, and at /privacy.

2. Information we collect

• Students: name, grade, school, contact details, presentation videos (voice and likeness)
• Parents/guardians: name, phone number, relationship to the student
• Teachers/admins: account email, role, and (for authorized admins only) OAuth tokens used to connect the Academy YouTube channel
• Automatically collected: usage logs, access logs, cookies, IP address

3. How we use personal information

1. Provide learning management: upload, store, and play student math presentation videos; track progress and attendance
2. Provide parent feedback through the parent portal
3. Account administration, abuse prevention, and service notices

4. Use of YouTube API Services and API Data

This API Client uses YouTube API Services to upload student presentation videos to the Academy’s own YouTube channel as unlisted videos and to play them in the official YouTube embedded player. Students and parents are not asked to sign in to their personal Google/YouTube accounts. Upload authorization is granted only by an Academy administrator’s Google account (OAuth scope: https://www.googleapis.com/auth/youtube.upload).

• YouTube Terms of Service: https://www.youtube.com/t/terms
• Google Privacy Policy: http://www.google.com/policies/privacy
• YouTube API Services Developer Policies: https://developers.google.com/youtube/terms/developer-policies

4.1 User information and API Data we access, collect, and store

We do not collect YouTube passwords. We do not use the YouTube Analytics API, Reporting API, Search API, or comment/subscription/like APIs. We do not store view counts, subscriber counts, or other statistical API Data.

4.2 How we use, process, and share this information (internal and external parties)

• Use: store student presentation videos and play them in the portal so teachers can give feedback and parents can review their child’s work.
• Internal sharing: the student’s assigned teachers and Academy administrators, the student’s parent/legal guardian, and the student. Videos are not shared with other families.
• External sharing: video files and related API Data are transmitted to Google LLC / YouTube for hosting, streaming, and embedded playback. We do not sell personal information or API Data. We do not share it with advertisers, data brokers, or unrelated third parties.
• Processing: videos are uploaded as unlisted on the Academy YouTube channel. The portal plays them with the official YouTube embedded player using the video ID. App records that match a video to a student are stored in Firebase (Google Cloud).
• Advertising: the API Client does not allow third parties to serve advertisements. The YouTube player may display ads served by YouTube.

4.3 Device information and cookies

We use cookies and similar technologies (including Firebase Authentication) to keep login sessions. When the YouTube embedded player loads, Google/YouTube may place, access, or recognize cookies or similar technologies on the user’s device or browser. See the Google Privacy Policy.

5. Storage, refresh, deletion, and revocation of API Data

5.1 Storage and 30-day refresh cycle

• Authorization tokens are stored only while the Academy YouTube connection remains active and only for the consented purpose.
• Stored YouTube API Data (video IDs, URLs, thumbnail URLs, and related metadata) is refreshed at least every 30 calendar days, or deleted if it cannot be refreshed. We run a weekly automated check and reconfirm stale records when the portal is used.
• If a video is deleted on YouTube, or if an authorization token can no longer be refreshed (revocation), related API Data is deleted as soon as possible and within 30 calendar days.
• Non-Authorized API Data is not stored longer than 30 calendar days.

5.2 How users request deletion of stored data

Any user may request that we delete stored data related to that user, including YouTube API Data.

1. Email lovelybk0412@naver.com or contact the Academy help desk. Use the subject “Data deletion request” and include the student name and a contact number.
2. We delete the stored API Data and related personal information as soon as possible and within 7 calendar days.
3. Important: deleting data stored by this API Client does not, in any way, affect data stored by YouTube. To delete a video on YouTube, an Academy administrator must use a YouTube application (YouTube Studio) or an authorized API Client that supports deletion. If you ask us to, we will also delete the YouTube copy.
4. If a user deletes their Academy account or a student’s enrollment ends, we also delete related stored data within 7 calendar days, except where a longer legal retention period applies.

5.3 Revoking this API Client’s access via Google security settings

In addition to the deletion procedure above, the Google account that authorized this API Client can revoke access to Authorized Data on Google’s security settings pages. Students and parents do not grant YouTube OAuth access through this API Client.

6. Retention of personal information

Personal information is retained until account deletion or the end of enrollment, then deleted without delay, unless a longer period is required by law. YouTube API Data follows the refresh and deletion rules in Section 5.

7. Sharing with third parties and processors

We do not provide personal information to third parties except as needed to host and stream videos, as follows.

8. User rights

Users and legal guardians may request access, correction, deletion, or suspension of processing of their personal information, including data relating to children under 14. We will act without delay. Deletion of YouTube API Data follows Section 5.